PkgRadar

npm · registry.npmjs.org

@vtex/toolbelt-config-cli

Remote Dependency Spec: devDependencies.nodemon-notifier-cli="https://github.com/Slessi/nodemon-notifier-cli.git"

Why PkgRadar flagged 0.0.1

SeveritySignalEvidence
mediumRemote Dependency SpecdevDependencies.nodemon-notifier-cli="https://github.com/Slessi/nodemon-notifier-cli.git" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.1Review82026-06-11
0.0.1-betaReview82026-06-11
0.1.0Review132026-06-11

Block this in CI

PkgRadar gates @vtex/toolbelt-config-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vtex/[email protected]
@vtex/toolbelt-config-cli — npm security scan | PkgRadar